Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
New Contributor

[fortigate] upload config script

Hello all,


I have enable fortigate vdom. So I can choose global and root page on fortigate UI.

I have two user and use different profile

1. name : admin, profile : super_admin

2. name : mike,   profile : prof_admin


I want to upload configuration scripts by shell script. There are my steps below:

Step1 : I use api to login fortigate by $fortigate_url/logincheck with admin user

Step2 : I use curl to upload Configuration Scripts by

curl -F source=upload -F filename=@$script_path -b $cookie_path -H "X-CSRFTOKEN:$csrftoken" -H Expect: -L -k [link]https://$fortigate_url/system/maint/confupload[/link]


My question is

those steps are working if I disable vdom mode

But I find something error in vdom mode.

There are three problem below.

Step2 not work if I enter fortigate UI first with "mike" user and stay in root page.

Step2 not work if I enter fortigate UI first with "admin" user and stay in root page. 

Step2 working if I enter fortigate UI first with "admin" user and stay in global page.


I get the error message about 


<html><head><title> No Access </title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="pragma" content="no-cache"><link href="/10dae176b6d87334023a74acd7380a60/css/legacy_style.css" rel="stylesheet" type="text/css"> <link href="/10dae176b6d87334023a74acd7380a60/css/legacy_dlg.css" rel="stylesheet" type="text/css"> <script type="text/javascript" src="/10dae176b6d87334023a74acd7380a60/js/es6-shim.js"></script> <script type="text/javascript" src="/10dae176b6d87334023a74acd7380a60/fweb_all.js"></script> <script type="text/javascript" src="/10dae176b6d87334023a74acd7380a60/js/legacy_error_validate.js"></script> <script type="text/javascript">$j(document).ready( initForm );</script> <script type="text/javascript" src="/10dae176b6d87334023a74acd7380a60/js/dialog.js"></script> </head><body class="" style="min-width:600px"><h1>No Access</h1><div class="dlg"><form method="post" name="noaccess" action="/login">You do not have permission to access the requested page.<div class="footer"><input type="hidden" name="CSRF_TOKEN" value="53DE693B598DFF5A191ACEC759B71F"> </div><input type=hidden name="redir" value="/system/maint/confupload?source=upload"> </form>"

I don't know how to handle this problem. Please tell me how to resolve this problem.

Maybe I need to use other method, but I don't know how to implement.

Please tell me if you have other method


Thank you !


ps. My Configuration Scripts file detail likes below

config vdom edit root config firewall address edit "XX_IP_v4_2.2.2.2_32"   set subnet "" next

edit "XX_IP_v4_2.2.2.3_32"

  set subnet "" next end config firewall addrgrp   edit "XX_List_v4_1"   set member XX_IP_v4_2.2.2.2_32 XX_IP_v4_2.2.2.3_32   next   edit "XX_List_v4"   set member XX_List_v4_1   next   edit "Group_v4"   append member XX_List_v4   next end end